Lucene search

K
cve[email protected]CVE-2012-1876
HistoryJun 12, 2012 - 10:55 p.m.

CVE-2012-1876

2012-06-1222:55:00
CWE-94
web.nvd.nist.gov
138
microsoft
internet explorer
remote code execution
cve-2012-1876
memory handling
buffer overflow
security vulnerability
pwn2own
cansecwest

7.8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.969 High

EPSS

Percentile

99.7%

Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access a nonexistent object, leading to a heap-based buffer overflow, aka “Col Element Remote Code Execution Vulnerability,” as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012.

7.8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.969 High

EPSS

Percentile

99.7%